Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/675df6-fce6-4cb1-a7bf-22b9aaa286f6/1/uc-4NRKWN20-qBxHwuzwTmmofAk.roa
File: uc-4NRKWN20-qBxHwuzwTmmofAk.roa (raw, json)
Hash identifier: 4fOvpfU4uk4s7RhTa4bdMPJ/KTqcBhNgOPQij7b1WOY=
Subject key identifier: B9:CF:B8:35:12:96:37:6D:3E:A8:1C:47:C2:EC:F0:4E:69:A8:7C:09
Certificate issuer: /CN=7fd8068e735996b8abe71db82ce0d6ba965c253b
Certificate serial: 01A0F175BB64C2994D8E37944A6C37D0BEFD
Authority key identifier: 7F:D8:06:8E:73:59:96:B8:AB:E7:1D:B8:2C:E0:D6:BA:96:5C:25:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f9gGjnNZlrir5x24LODWupZcJTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/675df6-fce6-4cb1-a7bf-22b9aaa286f6/1/uc-4NRKWN20-qBxHwuzwTmmofAk.roa
Signing time: Wed 30 Sep 2026 08:36:59 +0000
ROA not before: Wed 30 Sep 2026 08:36:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215028
IP address blocks: 81.85.48.0/22 maxlen: 22
81.85.48.0/24 maxlen: 24
81.85.49.0/24 maxlen: 24
81.85.50.0/24 maxlen: 24
81.85.51.0/24 maxlen: 24
89.31.28.0/22 maxlen: 22
89.31.28.0/24 maxlen: 24
89.31.29.0/24 maxlen: 24
89.31.30.0/24 maxlen: 24
89.31.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/675df6-fce6-4cb1-a7bf-22b9aaa286f6/1/f9gGjnNZlrir5x24LODWupZcJTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/675df6-fce6-4cb1-a7bf-22b9aaa286f6/1/f9gGjnNZlrir5x24LODWupZcJTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/f9gGjnNZlrir5x24LODWupZcJTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 11:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:75:bb:64:c2:99:4d:8e:37:94:4a:6c:37:d0:be:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fd8068e735996b8abe71db82ce0d6ba965c253b
Validity
Not Before: Sep 30 08:36:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9cfb8351296376d3ea81c47c2ecf04e69a87c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:04:ca:98:7b:68:dd:5a:d8:41:d1:cd:54:59:
e2:38:a5:cb:4b:32:3c:40:90:db:b8:89:b4:c1:ae:
ed:d1:44:66:a6:e9:68:10:b3:7b:23:5f:c8:d6:a0:
cb:82:d5:6d:9d:0e:ee:8c:6d:af:80:6f:a9:ce:70:
c6:b0:7d:ec:e7:6d:f4:27:7f:3c:7b:00:f9:11:46:
45:05:50:b2:40:c4:bc:c9:fa:c8:2f:27:ec:f8:a0:
72:9c:d7:36:d1:57:02:6d:ee:8c:95:15:b1:1f:a1:
ba:3d:82:72:55:a3:e0:6c:df:9e:2f:e7:ea:27:32:
7d:b7:0f:e5:3a:06:f3:a6:33:70:b4:0d:56:b4:5a:
08:f7:7f:b3:ca:17:4a:90:1a:82:39:38:14:5f:0e:
e3:a3:a5:46:3e:28:0b:23:42:97:0a:5d:55:0f:4a:
ed:eb:03:d8:f5:d5:7a:61:5a:ac:43:0c:f1:b7:32:
0e:5a:3e:8c:84:8e:01:5f:26:6a:16:1c:10:4c:2a:
8f:31:80:66:c2:67:5e:6d:04:1c:47:a8:8e:57:26:
dd:4a:c8:5a:b2:5a:d5:b6:d4:8a:e6:f5:dc:4b:9a:
83:be:81:d8:00:3c:83:ae:40:5e:45:97:81:40:64:
f3:4f:6c:39:a2:1c:68:46:d9:e5:8c:61:b2:1f:91:
8b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CF:B8:35:12:96:37:6D:3E:A8:1C:47:C2:EC:F0:4E:69:A8:7C:09
X509v3 Authority Key Identifier:
keyid:7F:D8:06:8E:73:59:96:B8:AB:E7:1D:B8:2C:E0:D6:BA:96:5C:25:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9gGjnNZlrir5x24LODWupZcJTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/675df6-fce6-4cb1-a7bf-22b9aaa286f6/1/uc-4NRKWN20-qBxHwuzwTmmofAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/675df6-fce6-4cb1-a7bf-22b9aaa286f6/1/f9gGjnNZlrir5x24LODWupZcJTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.85.48.0/22
89.31.28.0/22
Signature Algorithm: sha256WithRSAEncryption
cd:41:a6:35:ed:32:95:00:69:94:39:88:1e:23:c5:85:57:de:
7f:69:9e:b4:6d:00:a6:8a:8a:99:d0:3a:af:34:b7:2e:1b:e1:
7d:5a:1d:f4:19:a9:70:16:6c:2f:58:73:f8:35:06:ac:75:ff:
d1:2a:47:89:54:bf:de:5a:ae:c1:e8:da:cc:a5:66:25:9f:40:
0f:b7:90:65:48:d1:28:d7:10:44:e3:30:c5:c3:da:9d:69:0f:
1b:2e:0b:14:96:7a:5b:a3:e7:6e:bb:ac:04:65:ea:c8:b2:d3:
95:4d:fe:bc:d4:0b:6e:26:45:e8:9f:49:4e:ae:25:23:7e:f3:
3c:ce:9e:50:80:22:e1:53:f5:63:d0:6d:fa:13:dd:0f:f8:bf:
e0:19:bd:83:91:ba:8d:07:0c:a5:33:df:a0:94:af:10:74:51:
1a:b4:b0:9c:3c:f6:89:6c:5e:f6:19:fd:cc:61:51:39:e2:eb:
b6:9c:dd:00:61:c7:3c:51:d2:05:22:00:90:5c:78:1a:03:7f:
3b:6a:02:ab:bb:37:a3:00:80:42:da:cc:5c:c9:36:52:f6:ee:
22:cf:3f:27:9a:88:d6:1a:7a:b8:8e:4b:2b:2f:b8:87:2c:cc:
a5:a0:a0:c4:d4:ad:8b:43:ca:38:f5:a8:61:92:e6:9c:1f:08:
99:5e:d8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:04:46 2026 by rpki-client